$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json) Hash identifier: LSMej+J4nfX/00I69UFdQ6SsJ4hz8bVNkCRuUnQ5FdI= Subject key identifier: BB:3E:6A:D8:B4:7B:BF:6D:EE:17:EF:AE:06:68:A2:82:0F:AE:81:C8 Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft Manifest number: 04E0 Signing time: Sat 18 Oct 2025 17:56:00 +0000 Manifest this update: Sat 18 Oct 2025 17:56:00 +0000 Manifest next update: Sat 25 Oct 2025 17:56:00 +0000 Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: BYvASyg5ErSMT7ql7QwRfC0Y0cwbTg6w39SgVoOZsT8=) 2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5 Validity Not Before: Oct 18 17:56:00 2025 GMT Not After : Oct 25 17:56:00 2025 GMT Subject: CN=68f3d4b0-c5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:3e:82:08:8c:f7:cb:91:e8:a0:da:e3:de: 9d:0a:60:e5:e9:5b:d7:5e:d4:cd:5f:6e:b4:eb:28: c5:4d:5e:af:09:c6:0d:f0:53:03:27:bf:3d:d4:a3: fe:f5:59:2a:a3:c9:c1:82:ca:b3:43:a2:fe:e0:4e: 84:42:5b:a7:3d:a9:ea:fa:46:56:e6:16:0a:7b:3f: ba:61:d3:3d:30:5c:b7:60:f0:51:3a:22:d3:57:9b: 87:bc:d8:1e:39:62:e5:f0:7a:74:5b:df:c1:03:9b: 58:24:01:0e:fc:1d:4f:5a:65:1a:d8:98:73:6d:4e: 63:c6:32:53:15:d4:13:aa:94:c8:a2:c8:95:41:f0: 1f:c1:de:0a:1c:2e:4a:2b:fd:aa:05:7b:06:53:d2: e4:c5:33:99:8a:b3:1f:71:d6:4d:07:43:a6:83:5c: 25:63:eb:ee:cc:dc:eb:c9:ff:fb:cb:a2:4a:2c:43: 78:57:0f:0d:9d:31:7b:ff:0b:c7:8a:c8:60:82:8e: bd:9f:00:43:d5:f9:c6:8b:12:05:c3:d2:98:64:57: e9:b7:ee:2c:ee:eb:f2:0a:a1:89:a0:b1:f8:b0:15: 4d:b3:88:52:40:16:a8:8f:a9:95:0b:b7:2c:34:23: 25:31:2d:c0:34:f6:8d:09:ea:5b:0c:15:f4:e6:fd: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3E:6A:D8:B4:7B:BF:6D:EE:17:EF:AE:06:68:A2:82:0F:AE:81:C8 X509v3 Authority Key Identifier: keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b8:ae:16:fa:5f:24:4f:cb:4c:f5:57:bf:fa:eb:7d:e3:96: 1d:3f:55:fe:fa:ce:fb:f9:d1:d2:5d:a0:3b:b1:b2:a8:e1:f1: 9f:4f:71:37:0c:4b:b8:27:e2:fd:08:bb:ac:0c:2a:82:e7:4c: 2d:ab:52:de:72:fd:65:c9:3b:db:2f:50:dd:10:37:3f:c5:16: 99:6d:dc:32:10:ce:9c:de:30:08:9e:e9:27:1a:e3:7e:06:92: 55:b5:6c:ad:da:bf:48:15:01:ee:a8:98:64:4f:6d:00:d9:79: d3:13:8b:6b:eb:e7:06:a5:28:45:ee:53:41:2c:cf:4b:d7:a6: fd:51:3d:d4:71:1c:c6:e8:e2:18:34:a7:eb:d4:59:91:48:9b: 37:c9:1a:13:cf:35:f8:4d:f8:fe:af:2e:79:f1:25:97:ba:f8: 23:e8:74:7b:5d:1e:7e:ec:5b:a5:1e:87:f1:0c:d7:e5:ef:cd: 79:86:c8:6d:2f:c9:39:a7:19:a1:80:e8:7c:7a:11:bd:a5:8e: 8f:d7:26:6a:7f:87:f5:e5:7b:a2:8e:ac:e4:1b:32:a7:55:33: 5b:72:87:01:39:fd:ab:0f:d2:9b:65:3c:0b:f9:fc:e9:d6:71: dc:d8:36:d9:f4:a3:c7:a3:09:30:cd:4e:7f:4b:03:03:a8:bb: 13:c2:aa:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1 RTY2MEZFQTUwHhcNMjUxMDE4MTc1NjAwWhcNMjUxMDI1MTc1NjAwWjAYMRYwFAYD VQQDEw02OGYzZDRiMC1jNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aM+ggiM98uR6KDa496dCmDl6VvXXtTNX2606yjFTV6vCcYN8FMDJ7891KP+ 9Vkqo8nBgsqzQ6L+4E6EQlunPanq+kZW5hYKez+6YdM9MFy3YPBROiLTV5uHvNge OWLl8Hp0W9/BA5tYJAEO/B1PWmUa2JhzbU5jxjJTFdQTqpTIosiVQfAfwd4KHC5K K/2qBXsGU9LkxTOZirMfcdZNB0Omg1wlY+vuzNzryf/7y6JKLEN4Vw8NnTF7/wvH ishggo69nwBD1fnGixIFw9KYZFfpt+4s7uvyCqGJoLH4sBVNs4hSQBaoj6mVC7cs NCMlMS3ANPaNCepbDBX05v2HvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLs+ati0 e79t7hfvrgZoooIProHIMB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6 dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnuK4W+l8kT8tM9Ve/+ut945YdP1X++s77+dHSXaA7sbKo4fGfT3E3 DEu4J+L9CLusDCqC50wtq1Lecv1lyTvbL1DdEDc/xRaZbdwyEM6c3jAInuknGuN+ BpJVtWyt2r9IFQHuqJhkT20A2XnTE4tr6+cGpShF7lNBLM9L16b9UT3UcRzG6OIY NKfr1FmRSJs3yRoTzzX4Tfj+ry558SWXuvgj6HR7XR5+7FulHofxDNfl7815hsht L8k5pxmhgOh8ehG9pY6P1yZqf4f15XuijqzkGzKnVTNbcocBOf2rD9KbZTwL+fzp 1nHc2DbZ9KPHowkwzU5/SwMDqLsTwqpc -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:54 2025 by rpki-client